434 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
#Ensure that MTU matches one configured on the GRE interface on Orbit.
ip mtu 1346
ip nhrp authentication cisco123
ip nhrp map multicast dynamic
ip nhrp network-id 99
ip nhrp holdtime 300
ip nhrp shortcut
ip nhrp redirect
no ip split-horizon
ip tcp adjust-mss 1300
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile DMVPN
!
# BGP routing configuration
router bgp 65500
bgp router-id 172.16.0.1
bgp log-neighbor-changes
bgp listen range 172.16.0.0/24 peer-group DMVPN-SPOKE
neighbor DMVPN-SPOKE peer-group
neighbor DMVPN-SPOKE remote-as 65550
neighbor DMVPN-SPOKE next-hop-self
neighbor DMVPN-SPOKE default-originate
!
ip route 0.0.0.0 0.0.0.0 172.18.175.62
!
12.2.2.2 Status
#IKE/IPsec status
DMVPN-HUB#show crypto ikev2 sa
IPv4 Crypto IKEv2 SA
Tunnel-id Local Remote fvrf/ivrf Status
1 172.18.175.45/4500 172.18.175.138/4500 none/none READY
Encr: AES-CBC, keysize: 256, Hash: SHA96, DH Grp:5, Auth sign: RSA, Auth verify: RSA
Life/Active Time: 86400/1714 sec
IPv6 Crypto IKEv2 SA
DMVPN-HUB#show crypto ipsec sa